Last Updated: February 2022
If you are a California resident, please see the “Your California Privacy Rights” section.
A studio (“Studio”) is a photographer, photography studio, printing lab, or other entity purchasing or otherwise using our Services to fulfill an order by a customer (“Customer”) who may be providing information about a student or photography subject (individually, a “Student,” and collectively, “Students”).
Information You Provide to Us
We collect information you provide directly to us. For example, you share information directly with us when you create an account, fill out a form, submit or post content through our Services, make a purchase, communicate with us via third-party platforms, participate in a contest or promotion, request customer support, or otherwise communicate with us.
The types of personal information we may collect include:
Information We Collect Automatically When You Interact with Us
When you access or use our Services or otherwise transact business with us, we automatically collect certain information, including:
Information We Collect from Other Sources
We obtain information from third-party sources. For example, we may collect information about you from identity verification services, credit bureaus, advertising networks, data analytics providers, mailing list providers, financial services providers, operating systems and platforms, customer management providers, error tracking providers, and user experience tracking providers.
We use the information we collect to provide our Services to you, including to facilitate and fulfill photography orders between Studios and Customers.
We also use the information we collect to:
We share personal information in the following circumstances or as otherwise described in this policy:
We also share aggregated or de-identified information that cannot reasonably be used to identify you.
Our website does not respond to “do not track’ signals.
Photolynx is headquartered in the United States, and we have operations and service providers in the United States and other countries, including Canada, the United Kingdom, and Australia. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.
If you are in the European Economic Area, we provide adequate protection for the transfer of personal data to countries outside of the EEA through a series of intercompany agreements based on the Standard Contractual Clauses (“SCCs”) authorized under EU law. You may request a copy of these SCCs by contacting us using the contact information below.
Mobile Push Notifications
With your consent, we may send push notifications to your mobile device.
A mobile user might opt-in by:
You can deactivate these messages at any time by changing the notification settings on your mobile device. You may also opt out by replying “STOP” by text to the communicating number.
You may opt out of receiving text messages or promotional emails from PhotoLynx by following the instructions in those communications or by sending us an email at email@example.com. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
The Services are not intended for children, and PhotoLynx does not knowingly collect information from children under the age of 18.
Children aged 18 or younger should not submit any personal information without the permission of their parents or guardians. By using the Services, you are representing that you are at least 18.
California Consumer Privacy Act
In the preceding 12 months, we have collected the categories of personal information listed in the Collection of Information section above. We collect personal information for the business and commercial purposes described in the Use of Information section above.
In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients:
|Category of Personal Information||Categories of Recipients|
|Identifiers such as a real name, alias, postal address, phone number, unique personal identifier, online identifier, internet protocol address, email address, account name, bank account number, credit card or debit card number, or other similar identifiers; commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||Data analytics providers, internet service providers, operating systems and platforms, financial services providers, error tracking providers, and customer management providers.|
|“Personal Information” as defined in Cal. Civ. Code 1798.80, including any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.||Data analytics providers, internet service providers, operating systems and platforms, financial services providers, and customer management providers.|
|Commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||Data analytics providers, internet service providers, operating systems and platforms, user experience tracking providers, and financial services providers.|
|Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.||Data analytics providers, internet service providers, error tracking providers, user experience tracking providers, and operating systems and platforms.|
|Education information, defined as personally identifiable information that is not publicly available as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99.||Operating systems and platforms.|
|Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||Data analytics providers and user experience tracking providers.|
Photolynx does not sell your personal information.
Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, and disclose, (2) correct inaccuracies in your personal information, (3) request deletion of your personal information, (4) obtain your personal information in portable format, (5) opt out of any “sales” of your personal information that may be occurring, and (6) not be discriminated against for exercising these rights. You may make these requests by calling 800.243.1896 or by emailing us at firstname.lastname@example.org. We will verify your request by asking you to provide information related to your recent interactions with us, such as your name, school, order number, order date, billing address, or email address. We will not discriminate against you if you exercise your rights under the CCPA.
If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us.
Although we are not located in the European Economic Area (EEA) and do not market our Services there, we do occasionally provide our Services to individuals located in the EEA and strive to provide the privacy protections that individuals located there expect. If you are located in the EEA, the United Kingdom, or Switzerland, you have certain rights and protections under the law regarding the processing of your personal data, and this section applies to you.
Legal Basis for Processing
When we process your personal data, we will do so in reliance on the following lawful bases:
We store personal data associated with your account for as long as your account remains active. If you close your account, we will delete your account data within 30 days and send you a written confirmation when completed; otherwise, we will archive your account data after two years of inactivity. We store other personal data, including user email addresses, phone numbers, and names, for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations and to send order updates and marketing communications, unless the User opts out of receiving such communications.
Data Subject Requests
Subject to certain limitations, you have the right to request access to the personal data we hold about you and to receive your data in a portable format, the right to ask that your personal data be corrected or erased, and the right to object to, or request that we restrict, certain processing. If you would like to exercise any of these rights, please send us an email stating your request to email@example.com.
Questions or Complaints
If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:
For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
For individuals in the UK: https://ico.org.uk/global/contact-us/
For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
1012 Main Street Suite 104
Ramona, CA 92065
For more information about the privacy practices and policies of our affiliates Capturelife and ImageQuix, please see: